CVE-2007-0247: squid Resource Management Errors

EPSS trend

Probability

20.15%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.48 pp

From 19.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

20.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
Maturity: poc

References

20 links

www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.htmlX Refsource CONFIRM
www.squid-cache.org/bugs/show_bug.cgi?id=1857X Refsource CONFIRM
secunia.com/advisories/23921Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23946Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/22079VDB EntryX Refsource BID
www.vupen.com/english/advisories/2007/0199VDB EntryX Refsource VUPENVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200701-22.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/23810Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2007_12_squid.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDKSA-2007:026Vendor AdvisoryX Refsource MANDRIVA

Show all 20 references

www.trustix.org/errata/2007/0003/Vendor AdvisoryX Refsource TRUSTIX
www.ubuntu.com/usn/usn-414-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/23837Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23805Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23767Third Party AdvisoryX Refsource SECUNIAVendor Advisory
osvdb.org/39839VDB EntryX Refsource OSVDB
fedoranews.org/cms/node/2442Vendor AdvisoryX Refsource FEDORA
secunia.com/advisories/23889Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/31523VDB EntryX Refsource XF
security-tracker.debian.org/tracker/CVE-2007-0247Advisory

Related vulnerabilities

CVE-2005-2794debiansquid+13.15%21y ago07-09-2005 04:00store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.CVE-2005-2796debiansquid+17.83%21y ago07-09-2005 04:00The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.CVE-2005-0194debiansquid+15.12%21y ago06-02-2005 05:00Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.CVE-2005-0173debiansquid+131.94%21y ago06-02-2005 05:00squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.CVE-2005-0718debiansquid+112.53%21y ago12-03-2005 05:00Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.CVE-2005-0446debiansquid+341.11%21y ago15-02-2005 05:00Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.

All vulnerabilities insquid

CVE-2007-0247: squid Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References